
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
File: NPs4YMs0-seCIJnB-5kfzfY8hs0.mft (raw, json)
Hash identifier: MF5hTfR9jeDuJld7d3b+FMeXyj+kB9zFZgsx9pp0yBQ=
Subject key identifier: 98:F6:8F:2D:4E:5F:D1:9E:E2:96:4A:D4:DF:09:50:69:78:D8:88:81
Authority key identifier: 34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD
Certificate issuer: /CN=A91C1710/serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
Certificate serial: 04E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
Manifest number: 0A31
Signing time: Sat 03 Oct 2026 00:03:37 +0000
Manifest this update: Sat 03 Oct 2026 00:03:37 +0000
Manifest next update: Sat 10 Oct 2026 00:03:37 +0000
Files and hashes: 1: NPs4YMs0-seCIJnB-5kfzfY8hs0.crl (hash: ef18U9cweqdsp7UFg1tcB7Olb9GELwwV2KPWQS+samg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl
rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1252 (0x4e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1710, serialNumber=34FB3860CB34FAC7822099C1FB991FCDF63C86CD
Validity
Not Before: Oct 3 00:03:37 2026 GMT
Not After : Oct 10 00:03:37 2026 GMT
Subject: CN=6ac04659-56de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:08:3e:43:53:d3:a3:4b:3c:cc:2a:60:65:52:
d2:25:a8:77:22:b7:e0:37:92:55:b1:2c:b8:f9:05:
ac:3d:27:3a:a4:22:17:ff:25:43:80:45:7c:30:e8:
0c:3c:3d:07:2a:ea:e9:e4:d7:c1:ff:0a:3d:c7:e6:
92:b2:c8:a7:2b:0c:04:c8:14:9c:a3:92:71:9d:dc:
7b:76:b5:9c:0b:a4:ae:05:d9:a0:ef:7c:76:ec:78:
d3:b7:7d:e6:ea:02:88:45:25:f6:38:7b:e9:dd:db:
1e:49:58:29:2b:80:fc:61:b9:17:b6:81:f0:3c:99:
9f:7d:37:51:af:93:fd:77:d4:32:6b:83:05:d8:4f:
30:86:4a:e3:83:a8:e1:25:78:91:42:af:25:23:d1:
75:be:51:f6:29:4d:0d:92:8a:bb:14:e8:f8:d4:47:
55:34:dc:fd:17:60:7d:34:2e:46:3e:31:1d:09:24:
2c:71:c9:40:4d:89:4b:ba:6d:e6:11:5f:b2:39:65:
5e:0c:27:a4:fa:80:17:d7:72:8e:17:de:4a:dc:bd:
3d:2f:67:3a:c7:c9:16:15:85:41:c0:ae:69:46:b7:
f8:b5:01:c0:71:f1:21:b1:06:89:37:d9:0f:09:52:
3e:f3:29:61:90:40:e6:36:6e:85:6b:71:90:97:ad:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F6:8F:2D:4E:5F:D1:9E:E2:96:4A:D4:DF:09:50:69:78:D8:88:81
X509v3 Authority Key Identifier:
keyid:34:FB:38:60:CB:34:FA:C7:82:20:99:C1:FB:99:1F:CD:F6:3C:86:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NPs4YMs0-seCIJnB-5kfzfY8hs0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/NPs4YMs0-seCIJnB-5kfzfY8hs0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:37:99:2b:12:1d:be:72:52:0c:1b:9d:3f:82:51:52:ec:fc:
09:a7:aa:f1:5f:cb:1e:8a:d6:9b:52:71:72:76:05:40:23:dd:
b0:ab:77:98:47:ac:a4:36:f2:c2:68:1e:8c:f9:d5:e5:30:9e:
5d:d5:f9:10:4b:6a:10:94:75:de:51:c5:75:4f:42:94:42:bc:
b2:da:23:8e:f5:83:54:67:36:a8:fd:28:eb:28:de:17:9e:e8:
f5:88:27:2d:1c:95:19:64:a1:43:26:b6:ee:d9:6e:60:be:66:
d7:62:34:55:eb:a9:7b:7a:16:bb:61:c7:53:b0:1e:b7:96:85:
d2:04:8e:fd:27:77:0f:59:3e:4f:ba:0a:63:be:dc:bb:59:92:
45:17:c9:e9:b4:4a:2e:ae:a3:0c:3f:3d:69:a5:17:c4:b6:07:
63:99:6f:f5:e2:04:cc:c1:1a:86:a7:fe:36:c6:d5:bf:87:fd:
ec:df:5c:1b:e1:d1:dc:d7:0f:c5:18:1c:b2:ab:9c:cc:1b:6b:
5e:8a:0a:39:87:06:7c:3f:c3:d2:a8:9f:e2:38:29:4b:94:11:
0d:b5:65:4e:2f:06:6b:08:24:fc:54:7e:e4:13:5a:cb:ff:e0:
a0:0d:1e:47:1c:6c:10:99:c5:4f:72:a5:61:6d:f1:2b:14:46:
4b:fe:65:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE3MTAxMTAvBgNVBAUTKDM0RkIzODYwQ0IzNEZBQzc4MjIwOTlDMUZCOTkxRkNE
RjYzQzg2Q0QwHhcNMjYxMDAzMDAwMzM3WhcNMjYxMDEwMDAwMzM3WjAYMRYwFAYD
VQQDEw02YWMwNDY1OS01NmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4Ag+Q1PTo0s8zCpgZVLSJah3IrfgN5JVsSy4+QWsPSc6pCIX/yVDgEV8MOgM
PD0HKurp5NfB/wo9x+aSssinKwwEyBSco5Jxndx7drWcC6SuBdmg73x27HjTt33m
6gKIRSX2OHvp3dseSVgpK4D8YbkXtoHwPJmffTdRr5P9d9Qya4MF2E8whkrjg6jh
JXiRQq8lI9F1vlH2KU0Nkoq7FOj41EdVNNz9F2B9NC5GPjEdCSQscclATYlLum3m
EV+yOWVeDCek+oAX13KOF95K3L09L2c6x8kWFYVBwK5pRrf4tQHAcfEhsQaJN9kP
CVI+8ylhkEDmNm6Fa3GQl60N5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJj2jy1O
X9Ge4pZK1N8JUGl42IiBMB8GA1UdIwQYMBaAFDT7OGDLNPrHgiCZwfuZH832PIbN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTcxMC8xODIyOUE4Njgy
NkIxMUVDQTExQkE1MkJDNEY5QUUwMi9OUHM0WU1zMC1zZUNJSm5CLTVrZnpmWTho
czAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05QczRZTXMwLXNlQ0lKbkItNWtmemZZOGhzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MTcxMC8xODIyOUE4NjgyNkIxMUVDQTExQkE1MkJDNEY5QUUwMi9OUHM0WU1zMC1z
ZUNJSm5CLTVrZnpmWThoczAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVjeZKxIdvnJSDBudP4JRUuz8Caeq8V/LHorWm1JxcnYFQCPdsKt3mEespDby
wmgejPnV5TCeXdX5EEtqEJR13lHFdU9ClEK8stojjvWDVGc2qP0o6yjeF57o9Ygn
LRyVGWShQya27tluYL5m12I0Veupe3oWu2HHU7Aet5aF0gSO/Sd3D1k+T7oKY77c
u1mSRRfJ6bRKLq6jDD89aaUXxLYHY5lv9eIEzMEahqf+NsbVv4f97N9cG+HR3NcP
xRgcsquczBtrXooKOYcGfD/D0qif4jgpS5QRDbVlTi8Gawgk/FR+5BNay//goA0e
RxxsEJnFT3KlYW3xKxRGS/5lnw==
-----END CERTIFICATE-----
Generated at Sat Oct 3 10:41:16 2026 by rpki-client